Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/94DB8CCE5D181D58FDBBB42A91D3248BD30B024FBBD49AB7BE54AF5599351747/0/3133312e37322e3233362e302f32322d3232203d3e20323633373533.roa
File:                     3133312e37322e3233362e302f32322d3232203d3e20323633373533.roa (raw, json)
Hash identifier:          9Hj6Kg9Jd72P18EnQLzoAOIOVAfdeGZLnP4y3qSlcQ4=
Subject key identifier:   FE:83:DE:FF:86:6E:50:BC:2D:CF:8E:3D:2F:52:72:08:D8:34:F5:13
Certificate issuer:       /CN=E629C4E7637A20BC21967E803440E0984DB741BE
Certificate serial:       068115C517ECDAFD2ADB8BD0E651701917E96D5D
Authority key identifier: E6:29:C4:E7:63:7A:20:BC:21:96:7E:80:34:40:E0:98:4D:B7:41:BE
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E629C4E7637A20BC21967E803440E0984DB741BE.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/94DB8CCE5D181D58FDBBB42A91D3248BD30B024FBBD49AB7BE54AF5599351747/0/3133312e37322e3233362e302f32322d3232203d3e20323633373533.roa
Signing time:             Tue 04 Feb 2025 18:13:13 +0000
ROA not before:           Tue 04 Feb 2025 18:08:13 +0000
ROA not after:            Tue 03 Feb 2026 18:13:13 +0000
asID:                     263753
IP address blocks:        131.72.236.0/22 maxlen: 22
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:81:15:c5:17:ec:da:fd:2a:db:8b:d0:e6:51:70:19:17:e9:6d:5d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E629C4E7637A20BC21967E803440E0984DB741BE
        Validity
            Not Before: Feb  4 18:08:13 2025 GMT
            Not After : Feb  3 18:13:13 2026 GMT
        Subject: CN=FE83DEFF866E50BC2DCF8E3D2F527208D834F513
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:56:d0:ea:04:bf:96:34:5b:22:27:9c:e2:10:
                    dd:ab:1d:ab:5a:b0:5f:7c:f8:ff:23:0c:88:b6:80:
                    a8:a4:8e:3a:84:71:ed:1a:10:b0:55:94:ee:8b:25:
                    bc:11:8c:ec:4a:e5:d7:38:5a:1c:50:53:1b:77:bb:
                    01:ef:bc:e9:a7:d7:18:3d:ce:2b:54:d1:7b:bf:01:
                    0a:62:e9:d8:95:fa:06:57:91:40:d9:1d:d9:68:a0:
                    2f:81:ab:35:49:f0:43:fb:b8:e3:92:3a:84:1a:e3:
                    d7:19:d8:ad:ae:42:94:1f:c9:e0:23:6e:d5:b2:0e:
                    c3:6f:03:34:06:83:41:66:1f:86:9b:d6:04:14:46:
                    3c:d5:95:79:e2:f6:b1:36:c1:85:f7:53:57:7e:30:
                    13:c0:d0:95:f7:8e:61:f2:ea:df:0b:ef:1e:5c:0b:
                    e0:3e:f0:ff:65:66:44:64:db:78:c7:17:e3:4f:ca:
                    ab:58:bf:99:ad:23:b5:e1:34:b8:9c:46:0d:c9:a1:
                    8b:45:ee:7f:2a:94:c1:18:23:2a:9a:65:29:a8:15:
                    58:f8:f5:39:a7:f5:9d:d8:33:2f:2d:6a:bf:8b:c0:
                    6e:2e:4b:dc:b1:5e:0a:1b:fd:35:c8:6c:08:c4:e7:
                    0c:8f:64:c8:a1:2d:c7:c0:b4:ae:7b:72:18:8b:a4:
                    3c:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:83:DE:FF:86:6E:50:BC:2D:CF:8E:3D:2F:52:72:08:D8:34:F5:13
            X509v3 Authority Key Identifier:
                keyid:E6:29:C4:E7:63:7A:20:BC:21:96:7E:80:34:40:E0:98:4D:B7:41:BE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/94DB8CCE5D181D58FDBBB42A91D3248BD30B024FBBD49AB7BE54AF5599351747/0/E629C4E7637A20BC21967E803440E0984DB741BE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E629C4E7637A20BC21967E803440E0984DB741BE.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/94DB8CCE5D181D58FDBBB42A91D3248BD30B024FBBD49AB7BE54AF5599351747/0/3133312e37322e3233362e302f32322d3232203d3e20323633373533.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.72.236.0/22

    Signature Algorithm: sha256WithRSAEncryption
         1a:6c:8b:c2:c0:d6:fa:1d:c1:fb:f0:c6:06:b6:71:f4:1f:a0:
         c5:4f:4e:83:ce:9d:8a:8e:cb:ea:d1:72:69:ed:e9:6d:de:9b:
         f6:79:19:e0:66:2c:da:92:90:ee:e3:e3:af:4f:83:d6:51:1a:
         8e:20:e3:c0:52:fb:de:84:82:94:24:fd:27:be:a2:35:e7:a3:
         c8:ab:b9:0b:14:fd:a6:c4:d3:ad:f6:95:06:69:41:c5:b5:2d:
         a7:78:62:c0:57:5b:7c:88:88:29:76:12:c0:27:e1:55:9c:e9:
         b7:35:8e:50:63:17:a7:bb:1f:18:da:e1:83:7e:83:bc:ce:1c:
         ff:88:79:4a:cc:bd:c3:64:db:c2:c1:b1:d1:db:6e:d1:47:62:
         ec:25:6b:06:7f:78:37:05:55:73:8f:94:b7:5a:99:c2:59:b7:
         dc:c6:f7:c0:a4:37:c0:80:fe:98:0d:1e:4f:03:59:cd:99:6f:
         69:e2:3c:c5:44:94:11:73:da:92:6d:45:53:7f:cb:42:d4:d5:
         51:c6:e5:f7:d8:35:e6:82:0b:b4:f2:6f:b7:71:a2:f7:4c:b8:
         d3:3d:12:9f:2d:31:54:a9:c6:d0:06:69:1b:30:f8:7b:92:8d:
         4b:53:21:cc:63:54:31:bd:6e:c3:37:94:ab:44:a8:bd:78:3d:
         48:58:f2:e1
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIUBoEVxRfs2v0q24vQ5lFwGRfpbV0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRTYyOUM0RTc2MzdBMjBCQzIxOTY3RTgwMzQ0MEUwOTg0
REI3NDFCRTAeFw0yNTAyMDQxODA4MTNaFw0yNjAyMDMxODEzMTNaMDMxMTAvBgNV
BAMTKEZFODNERUZGODY2RTUwQkMyRENGOEUzRDJGNTI3MjA4RDgzNEY1MTMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCiVtDqBL+WNFsiJ5ziEN2rHata
sF98+P8jDIi2gKikjjqEce0aELBVlO6LJbwRjOxK5dc4WhxQUxt3uwHvvOmn1xg9
zitU0Xu/AQpi6diV+gZXkUDZHdlooC+BqzVJ8EP7uOOSOoQa49cZ2K2uQpQfyeAj
btWyDsNvAzQGg0FmH4ab1gQURjzVlXni9rE2wYX3U1d+MBPA0JX3jmHy6t8L7x5c
C+A+8P9lZkRk23jHF+NPyqtYv5mtI7XhNLicRg3JoYtF7n8qlMEYIyqaZSmoFVj4
9Tmn9Z3YMy8tar+LwG4uS9yxXgob/TXIbAjE5wyPZMihLcfAtK57chiLpDynAgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQU/oPe/4ZuULwtz449L1JyCNg09RMwHwYDVR0j
BBgwFoAU5inE52N6ILwhln6ANEDgmE23Qb4wDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy85NERCOENDRTVEMTgxRDU4RkRCQkI0MkE5MUQzMjQ4QkQz
MEIwMjRGQkJENDlBQjdCRTU0QUY1NTk5MzUxNzQ3LzAvRTYyOUM0RTc2MzdBMjBC
QzIxOTY3RTgwMzQ0MEUwOTg0REI3NDFCRS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9FNjI5QzRFNzYzN0EyMEJDMjE5
NjdFODAzNDQwRTA5ODREQjc0MUJFLmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvOTREQjhDQ0U1RDE4MUQ1OEZEQkJCNDJBOTFEMzI0OEJEMzBCMDI0RkJC
RDQ5QUI3QkU1NEFGNTU5OTM1MTc0Ny8wLzMxMzMzMTJlMzczMjJlMzIzMzM2MmUz
MDJmMzIzMjJkMzIzMjIwM2QzZTIwMzIzNjMzMzczNTMzLnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCg0js
MA0GCSqGSIb3DQEBCwUAA4IBAQAabIvCwNb6HcH78MYGtnH0H6DFT06Dzp2Kjsvq
0XJp7elt3pv2eRngZizakpDu4+OvT4PWURqOIOPAUvvehIKUJP0nvqI156PIq7kL
FP2mxNOt9pUGaUHFtS2neGLAV1t8iIgpdhLAJ+FVnOm3NY5QYxenux8Y2uGDfoO8
zhz/iHlKzL3DZNvCwbHR227RR2LsJWsGf3g3BVVzj5S3WpnCWbfcxvfApDfAgP6Y
DR5PA1nNmW9p4jzFRJQRc9qSbUVTf8tC1NVRxuX32DXmggu08m+3caL3TLjTPRKf
LTFUqcbQBmkbMPh7ko1LUyHMY1QxvW7DN5SrRKi9eD1IWPLh
-----END CERTIFICATE-----
Generated at Sat Apr 5 17:19:28 2025 by rpki-client